On 8/28/13 11:50 AM, Michal Zalewski wrote:
> 1) Both jar: and mhtml: (which work or worked in a very similar way)
> have caused problems in absence of strict Content-Type matching.
This is an issue for both versions of this proposal. We'd need to do
strict matching on the type.
-Boris